Security Operations Engineer

The Security Operations Engineer will monitor security events and alerts using various security tooling to identify and triage potential threats. They will develop, implement, and maintain high-fidelity detection rules and alerts within SIEM and other security platforms. Responsibilities include conducting continuous tuning and optimization of existing detection logic, responding to issues identified by employees, and acting as a security incident response lead. The role involves building and managing security playbooks, conducting security assessments through vulnerability testing and threat hunts, and performing security reviews of corporate properties. Additionally, the engineer will lead security incident response tabletop exercises, evolve the use of Cribl products in the security tech stack, and collaborate with threat intelligence teams to integrate new indicators of compromise into detection strategies.